new script to sync ssh keys from a Gitea instance.

This commit is contained in:
2025-09-21 20:10:32 -04:00
parent 29d22a1024
commit b3d69e6dac
Executable
+51
View File
@@ -0,0 +1,51 @@
#!/usr/bin/env bash
# syncronize authorized_keys with a Gitea instance,
# enabling all your ssh keys in your Gitea instance
# to allow connecting to your machine.
# load in defaults from config
scriptRoot=$(dirname "$0")
configFile="$scriptRoot/config.sh"
if [[ -f "$configFile" ]]; then
source "$configFile"
else
echo "${0} requires config file to exist"
exit 1
fi
if [[ -z "${GITEA_TOKEN}" ]] || [[ -z "${GITEA_DOMAIN}" ]]; then
echo "${0} requires config file to contain GITEA_DOMAIN and GITEA_TOKEN"
exit 2
fi
# if there is a filter string, use it
jq_select=""
if [[ -n "${GITEA_FILTER}" ]]; then
jq_select=" | select(. | contains(\"${GITEA_FILTER}\"))"
fi
# fetch current keys into new file
curl --silent -X 'GET' \
"https://${GITEA_DOMAIN}/api/v1/user/keys?token=${GITEA_TOKEN}" \
-H 'accept: application/json' | \
jq -r ".[].key${jq_select}" > "${HOME}/.ssh/authorized_keys.new"
# get filesizes
oldSize=$(wc -l "${HOME}/.ssh/authorized_keys" | cut -d ' ' -f 1)
newSize=$(wc -l "${HOME}/.ssh/authorized_keys.new" | cut -d ' ' -f 1)
# compare contents
gitDiff=$(git diff --color --unified=0 "${HOME}/.ssh/authorized_keys" "${HOME}/.ssh/authorized_keys.new" | grep -vE '(\+\+\+|---|diff|index|@@)')
# ensure new is not-empty, check if different, log the change, and update the file
if [[ "$newSize" -gt "0" ]] && [[ -n "$gitDiff" ]]; then
# backup existing authorized_keys, if one exists
if [[ -f "${HOME}/.ssh/authorized_keys" ]]; then
cp "${HOME}/.ssh/authorized_keys" "${HOME}/.ssh/authorized_keys.old"
fi
mv "${HOME}/.ssh/authorized_keys.new" "${HOME}/.ssh/authorized_keys"
echo "$gitDiff" | "$scriptRoot/discord.sh" -c 'white' -t 'Auth Keys Updated'
fi